Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613530383a3a2f34362d3438203d3e20323135393536.roa
File:                     326130613a363034343a613530383a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          L3iy+YX86wWmGOZpZV8HiBAb6AR0XfxqCfBWi0Rg3BI=
Subject key identifier:   2E:C6:24:8F:E3:3D:29:A0:32:60:BE:F4:89:EF:0A:E3:31:21:EA:80
Certificate issuer:       /CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
Certificate serial:       5A4429B1896FE305A922A1841332F6FB31216BD7
Authority key identifier: A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613530383a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Sat 08 Feb 2025 19:35:59 +0000
ROA not before:           Sat 08 Feb 2025 19:30:59 +0000
ROA not after:            Sat 07 Feb 2026 19:35:59 +0000
asID:                     215956
IP address blocks:        2a0a:6044:a508::/46 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:44:29:b1:89:6f:e3:05:a9:22:a1:84:13:32:f6:fb:31:21:6b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
        Validity
            Not Before: Feb  8 19:30:59 2025 GMT
            Not After : Feb  7 19:35:59 2026 GMT
        Subject: CN=2EC6248FE33D29A03260BEF489EF0AE33121EA80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:76:ed:3d:77:46:7f:9f:a5:54:40:5e:09:
                    85:54:a0:d0:ef:4f:6f:3f:d8:4c:ac:f5:31:26:b9:
                    1a:34:77:4a:e1:f3:61:47:b2:ff:cf:ab:6a:2a:91:
                    c0:34:6c:97:99:03:46:6a:56:62:77:2e:b9:ec:c0:
                    e6:af:69:1e:19:d1:87:0d:50:8f:aa:9b:91:8e:18:
                    14:cb:d6:ff:b1:81:1d:e8:6d:38:26:f4:61:2c:a6:
                    ee:0a:aa:b7:74:f6:f7:81:e5:c2:85:13:3d:c9:36:
                    50:6d:e3:aa:c5:a1:1a:64:b5:b0:82:32:13:bd:f0:
                    01:e7:c6:c3:ca:ab:09:7f:e9:ca:fa:14:5d:ce:e9:
                    52:0f:f5:30:01:57:8f:b3:0e:04:bb:d8:4a:ec:6f:
                    6e:d9:20:91:a7:48:62:4a:1d:fb:da:a7:86:fb:ca:
                    ed:5b:01:2c:8c:72:5d:ff:fc:8a:36:56:90:c3:07:
                    4a:5a:aa:63:88:87:ae:f2:4e:bd:77:24:c8:4e:fe:
                    a3:04:11:02:a0:63:03:1e:12:87:19:fb:5c:0a:3d:
                    32:28:02:7c:56:6c:bd:89:e7:83:ac:5b:76:68:f5:
                    7c:6c:5d:10:2f:ae:12:06:a5:4e:26:67:cb:9b:6f:
                    5b:68:04:1d:ad:73:de:44:f5:d6:66:ac:71:54:c1:
                    bb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C6:24:8F:E3:3D:29:A0:32:60:BE:F4:89:EF:0A:E3:31:21:EA:80
            X509v3 Authority Key Identifier:
                keyid:A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613530383a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a508::/46

    Signature Algorithm: sha256WithRSAEncryption
         1f:3f:4e:5b:cd:11:92:18:a7:a2:9f:b1:c8:c6:40:b6:a1:4f:
         c7:3c:32:8f:f8:5a:68:18:30:f0:a3:42:93:9f:cd:d3:e4:7d:
         e7:6c:da:9c:75:16:8b:34:80:92:64:0d:b6:87:47:fb:55:43:
         94:ab:6e:83:48:f0:f5:74:25:66:e1:a4:44:7b:34:7b:0b:60:
         3e:f7:e6:1f:ab:91:ce:92:c0:36:1b:90:d5:87:eb:ff:80:64:
         cf:b2:70:f3:d1:ee:3f:19:04:93:71:ba:30:54:5d:f2:44:40:
         ba:44:f8:f2:3a:a4:52:4c:6b:3f:e5:3d:55:1c:eb:2c:4b:25:
         e7:da:e7:5c:14:8f:3b:e6:81:d3:ef:cf:3c:b7:68:aa:e0:b2:
         d1:f8:70:8d:47:7c:7e:b4:08:e0:53:06:9b:60:49:f3:61:f6:
         c3:64:20:9b:7e:84:86:2d:06:36:ab:2a:51:ca:79:d9:68:fe:
         ef:23:65:7e:40:85:f8:16:20:a2:46:e9:0f:cb:11:41:f6:00:
         ce:d8:57:2e:ef:4a:16:38:c4:f2:63:6c:e6:6d:f1:7f:11:05:
         9f:75:30:4b:8d:86:34:14:f3:04:cf:c8:90:dc:25:70:c1:88:
         b3:53:ff:86:8d:72:89:cd:99:8b:27:a9:5b:8a:5f:24:ab:6f:
         0e:d0:10:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----